| Submission Date | Release Date | Submitter | Organization | Version | Comment |
|---|---|---|---|---|---|
| 2006-07-19 | 2006-07-19 | PLOVER | N/A | Draft 3 | N/A |
Submission Date: 2006-07-19
Release Date: 2006-07-19
Submitter: PLOVER
Organization: N/A
Version: Draft 3
Comment:
N/A
| Modification Date | Release Date | Modifier | Organization | Version | Importance | Comment |
|---|---|---|---|---|---|---|
| 2008-07-01 | 2008-09-09 | Eric Dalci | Cigital | 1.0 | N/A | updated Time_of_Introduction |
| 2008-08-15 | 2008-09-09 | N/A | Veracode | 1.0 | N/A | Suggested OWASP Top Ten 2004 mapping |
| 2008-09-08 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Alternate_Terms, Applicable_Platforms, Background_Details, Common_Consequences, Description, Relationships, Other_Notes, References, Taxonomy_Mappings, Weakness_Ordinalities |
| 2009-01-12 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Alternate_Terms, Applicable_Platforms, Background_Details, Common_Consequences, Demonstrative_Examples, Description, Detection_Factors, Enabling_Factors_for_Exploitation, Name, Observed_Examples, Other_Notes, Potential_Mitigations, References, Relationships |
| 2009-03-10 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Potential_Mitigations |
| 2009-05-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Name |
| 2009-07-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Description |
| 2009-10-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Observed_Examples, Relationships |
| 2009-12-28 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Demonstrative_Examples, Description, Detection_Factors, Enabling_Factors_for_Exploitation, Observed_Examples |
| 2010-02-16 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Applicable_Platforms, Detection_Factors, Potential_Mitigations, References, Relationships, Taxonomy_Mappings |
| 2010-04-05 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Description, Potential_Mitigations, Related_Attack_Patterns |
| 2010-06-21 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Common_Consequences, Description, Name, Potential_Mitigations, References, Relationships |
| 2010-09-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Potential_Mitigations |
| 2011-03-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Demonstrative_Examples, References |
| 2011-06-01 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Common_Consequences |
| 2011-06-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2011-09-13 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Detection_Factors, Potential_Mitigations |
| 2012-05-11 | N/A | CWE Content Team | MITRE | N/A | N/A | updated References, Relationships |
| 2012-10-30 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Potential_Mitigations |
| 2013-07-17 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2014-07-30 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships, Taxonomy_Mappings |
| 2015-12-07 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2017-01-19 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Related_Attack_Patterns |
| 2017-05-03 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Related_Attack_Patterns, Relationships |
| 2017-11-08 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Applicable_Platforms, Causal_Nature, Demonstrative_Examples, Enabling_Factors_for_Exploitation, Likelihood_of_Exploit, Modes_of_Introduction, References, Relationships |
| 2018-03-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Alternate_Terms, Demonstrative_Examples, Description, Observed_Examples, References, Relationship_Notes, Relationships |
| 2019-01-03 | N/A | CWE Content Team | MITRE | N/A | N/A | updated References, Relationships, Taxonomy_Mappings |
| 2019-09-19 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2020-02-24 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Applicable_Platforms, Potential_Mitigations, Relationships |
| 2020-06-25 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Observed_Examples, Potential_Mitigations |
| 2020-08-20 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2020-12-10 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2021-03-15 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Demonstrative_Examples, Description |
| 2021-07-20 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2021-10-28 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2022-06-28 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Observed_Examples, Relationships |
| 2022-10-13 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Background_Details, Observed_Examples |
| 2023-01-31 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Alternate_Terms, Demonstrative_Examples, Description |
| 2023-04-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated References, Relationships, Time_of_Introduction |
| 2023-06-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Mapping_Notes, Relationships |
| 2024-02-29 | 2024-02-29 | CWE Content Team | MITRE | 4.14 | N/A | updated Relationships |
| 2024-11-19 | 2024-11-19 | CWE Content Team | MITRE | 4.16 | N/A | updated Relationships |
| 2025-04-03 | 2025-04-03 | CWE Content Team | MITRE | 4.17 | N/A | updated Alternate_Terms, Common_Consequences, Description, Diagram, Other_Notes |
Modification Date: 2008-07-01
Release Date: 2008-09-09
Modifier: Eric Dalci
Organization: Cigital
Version: 1.0
Importance: N/A
Comment:
updated Time_of_Introduction
Modification Date: 2008-08-15
Release Date: 2008-09-09
Modifier: N/A
Organization: Veracode
Version: 1.0
Importance: N/A
Comment:
Suggested OWASP Top Ten 2004 mapping
Modification Date: 2008-09-08
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Alternate_Terms, Applicable_Platforms, Background_Details, Common_Consequences, Description, Relationships, Other_Notes, References, Taxonomy_Mappings, Weakness_Ordinalities
Modification Date: 2009-01-12
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Alternate_Terms, Applicable_Platforms, Background_Details, Common_Consequences, Demonstrative_Examples, Description, Detection_Factors, Enabling_Factors_for_Exploitation, Name, Observed_Examples, Other_Notes, Potential_Mitigations, References, Relationships
Modification Date: 2009-03-10
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Potential_Mitigations
Modification Date: 2009-05-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Name
Modification Date: 2009-07-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Description
Modification Date: 2009-10-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Observed_Examples, Relationships
Modification Date: 2009-12-28
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Demonstrative_Examples, Description, Detection_Factors, Enabling_Factors_for_Exploitation, Observed_Examples
Modification Date: 2010-02-16
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Applicable_Platforms, Detection_Factors, Potential_Mitigations, References, Relationships, Taxonomy_Mappings
Modification Date: 2010-04-05
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Description, Potential_Mitigations, Related_Attack_Patterns
Modification Date: 2010-06-21
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Common_Consequences, Description, Name, Potential_Mitigations, References, Relationships
Modification Date: 2010-09-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Potential_Mitigations
Modification Date: 2011-03-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Demonstrative_Examples, References
Modification Date: 2011-06-01
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Common_Consequences
Modification Date: 2011-06-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2011-09-13
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Detection_Factors, Potential_Mitigations
Modification Date: 2012-05-11
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated References, Relationships
Modification Date: 2012-10-30
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Potential_Mitigations
Modification Date: 2013-07-17
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2014-07-30
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships, Taxonomy_Mappings
Modification Date: 2015-12-07
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2017-01-19
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Related_Attack_Patterns
Modification Date: 2017-05-03
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Related_Attack_Patterns, Relationships
Modification Date: 2017-11-08
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Applicable_Platforms, Causal_Nature, Demonstrative_Examples, Enabling_Factors_for_Exploitation, Likelihood_of_Exploit, Modes_of_Introduction, References, Relationships
Modification Date: 2018-03-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Alternate_Terms, Demonstrative_Examples, Description, Observed_Examples, References, Relationship_Notes, Relationships
Modification Date: 2019-01-03
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated References, Relationships, Taxonomy_Mappings
Modification Date: 2019-09-19
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2020-02-24
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Applicable_Platforms, Potential_Mitigations, Relationships
Modification Date: 2020-06-25
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Observed_Examples, Potential_Mitigations
Modification Date: 2020-08-20
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2020-12-10
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2021-03-15
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Demonstrative_Examples, Description
Modification Date: 2021-07-20
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2021-10-28
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2022-06-28
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Observed_Examples, Relationships
Modification Date: 2022-10-13
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Background_Details, Observed_Examples
Modification Date: 2023-01-31
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Alternate_Terms, Demonstrative_Examples, Description
Modification Date: 2023-04-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated References, Relationships, Time_of_Introduction
Modification Date: 2023-06-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Mapping_Notes, Relationships
Modification Date: 2024-02-29
Release Date: 2024-02-29
Modifier: CWE Content Team
Organization: MITRE
Version: 4.14
Importance: N/A
Comment:
updated Relationships
Modification Date: 2024-11-19
Release Date: 2024-11-19
Modifier: CWE Content Team
Organization: MITRE
Version: 4.16
Importance: N/A
Comment:
updated Relationships
Modification Date: 2025-04-03
Release Date: 2025-04-03
Modifier: CWE Content Team
Organization: MITRE
Version: 4.17
Importance: N/A
Comment:
updated Alternate_Terms, Common_Consequences, Description, Diagram, Other_Notes
| Contributor Date | Release Date | Type | Contributor | Organization | Version | Comment |
|---|---|---|---|---|---|---|
| 2025-03-10 | 2025-04-03 | Content | Abhi Balakrishnan | N/A | 4.17 | Provided diagram to improve CWE usability. |
Contributor Date: 2025-03-10
Release Date: 2025-04-03
Type: Content
Contributor: Abhi Balakrishnan
Organization: N/A
Version: 4.17
Comment:
Provided diagram to improve CWE usability.
| Change Date | Previous Entry Name | Version |
|---|---|---|
| 2008-04-11 | Cross-site Scripting (XSS) | N/A |
| 2009-01-12 | Failure to Sanitize Directives in a Web Page (aka 'Cross-site scripting' (XSS)) | N/A |
| 2009-05-27 | Failure to Preserve Web Page Structure (aka 'Cross-site Scripting') | N/A |
| 2010-06-21 | Failure to Preserve Web Page Structure ('Cross-site Scripting') | N/A |
Change Date: 2008-04-11
Version: N/A
Previous Entry Name: Cross-site Scripting (XSS)
Change Date: 2009-01-12
Version: N/A
Previous Entry Name: Failure to Sanitize Directives in a Web Page (aka 'Cross-site scripting' (XSS))
Change Date: 2009-05-27
Version: N/A
Previous Entry Name: Failure to Preserve Web Page Structure (aka 'Cross-site Scripting')
Change Date: 2010-06-21
Version: N/A
Previous Entry Name: Failure to Preserve Web Page Structure ('Cross-site Scripting')